
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier: qtLxkz3ym3fsF0eLiFfJJ3Uy767vqSoUbwtQ5OXcXRY=
Subject key identifier: 0A:5C:18:FB:77:33:40:A4:D8:3A:25:09:1A:74:36:E6:17:90:A3:EF
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 04EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number: 04C3
Signing time: Thu 16 Apr 2026 23:50:21 +0000
Manifest this update: Thu 16 Apr 2026 23:50:21 +0000
Manifest next update: Thu 23 Apr 2026 23:50:21 +0000
Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: 9u2kGF91yRWaRTHoaTumFXzsFfKu5DOCTJ+JyODgjI8=)
2: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: AI0r7gDdR6RA/Vld2pQnk6d3svPO4G7tUuMRMEKGy/M=)
3: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Ykk+PqOPcAQxC3ivcFoFj4chGvoYVmrlUu4Emw4r4cM=)
4: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: grqcDNhPLZ19+sVArgIFaTXjwPldcbbRWwq0KUxCAaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Apr 16 23:50:21 2026 GMT
Not After : Apr 23 23:50:21 2026 GMT
Subject: CN=69e175bd-b9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f7:bf:68:ac:b8:1c:31:85:43:7c:10:28:66:
15:08:ce:31:89:6c:28:93:d8:e8:40:93:1e:d8:e8:
fc:19:c1:70:16:53:38:42:18:0b:2f:3b:ea:06:f4:
bf:eb:64:ea:24:a0:67:6c:70:c0:40:16:1c:ba:97:
7b:ac:54:04:42:e8:97:4f:f6:1a:46:e5:fc:bd:3f:
3f:e9:1d:dc:06:fc:1c:32:96:48:df:a7:63:37:9f:
d9:77:36:02:69:b0:e5:af:90:42:83:f2:6a:37:7a:
91:54:b1:ca:de:2b:3b:82:ea:07:91:96:db:7f:13:
6f:04:38:d6:c1:2b:1f:a7:b4:c3:e1:25:b5:cc:27:
3f:3f:84:cc:8a:47:b3:cf:7f:e7:bd:0e:bf:c1:9f:
33:e1:05:7c:68:51:da:ab:48:ba:05:c1:a0:36:82:
6f:2c:19:34:17:7b:fb:dd:b3:cc:84:5a:5e:a4:03:
4f:02:03:cd:8e:72:bd:64:90:69:aa:fe:40:56:48:
e4:df:86:96:a2:7d:95:64:cd:44:89:6b:ae:44:f4:
e0:70:65:8a:b6:7b:11:82:34:9e:75:c2:d9:dc:66:
35:ed:af:4d:c4:31:99:82:07:0c:e4:1b:b6:72:22:
10:86:21:13:f9:60:5a:73:1b:d2:3e:09:b2:e2:a4:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:18:FB:77:33:40:A4:D8:3A:25:09:1A:74:36:E6:17:90:A3:EF
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:55:da:5e:06:04:91:46:2e:11:94:08:f8:0d:3b:92:45:c2:
b1:b8:7d:58:e7:c8:55:6a:77:06:4c:d8:d4:0a:d0:c8:80:7e:
dd:30:76:df:3f:1a:44:b9:9d:ff:28:00:05:94:ce:61:6d:9c:
00:a7:6a:96:46:7b:f9:3c:4f:18:f4:ed:e7:57:98:4e:48:d8:
58:41:99:88:37:d3:eb:ea:91:0c:a3:30:68:ca:49:d4:23:e1:
a2:05:a0:54:ad:ae:72:61:b5:1b:b3:f7:96:c7:5c:9d:05:3d:
28:20:2b:34:84:e5:0b:32:0f:d4:6b:8c:dd:81:c1:1a:cd:1c:
94:de:71:94:8e:9d:b5:4e:58:bf:9b:2b:97:65:5e:6e:86:a1:
27:9b:b6:53:09:d3:44:9f:3d:d5:46:ae:72:d6:71:4b:b1:09:
12:9e:c2:58:5a:1d:26:0b:04:ee:f2:ff:fd:47:ad:ee:3e:6c:
74:0e:a9:e5:63:59:6c:2d:1a:ef:87:bd:96:15:ff:63:03:2e:
83:13:f4:b8:b8:99:d7:a0:ea:f0:2f:9c:5d:aa:8b:9f:fb:1c:
3d:db:f7:5c:2c:3b:0c:c9:ba:5b:85:44:d6:4d:2e:72:c4:28:
f9:c6:3a:ea:49:c7:3c:9d:7c:67:35:8c:f1:fa:fe:f1:26:56:
24:2a:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:02 2026 by rpki-client